$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft File: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft (raw, json) Hash identifier: uqIVd3n0OXb0nkLH0FPnUmHiZ29k2ODApg/UbDDA5CY= Subject key identifier: 71:B4:63:E9:BA:C8:27:02:65:30:DC:92:11:DB:1D:D0:E9:C4:89:70 Authority key identifier: DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 Certificate issuer: /CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Certificate serial: 71AD92136D8ACEF302AE45620A0CB2CA16C60BAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 08:38:01 +0000 Manifest this update: Thu 03 Sep 2026 08:33:01 +0000 Manifest next update: Fri 04 Sep 2026 11:12:01 +0000 Files and hashes: 1: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: 8kH9OYeCGgkpS6ETOYa6DFVI3BcrTxBasG8Wv5iWOP8=) 2: DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl (hash: Cv8EHQHcz5w0koQgvxN3KUtYXdgpV9UUK49NqXOZ2bM=) 3: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: lXhYJ0DA1ZPF7j87Xae2VDeesVSyf9L7rCounE/aVVg=) 4: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: uFKAqSD6oWq2rEbik7/vRzt6HsV3cf1Z8RYkorvCjFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:92:13:6d:8a:ce:f3:02:ae:45:62:0a:0c:b2:ca:16:c6:0b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09 Validity Not Before: Sep 3 08:33:01 2026 GMT Not After : Sep 4 11:12:01 2026 GMT Subject: CN=71B463E9BAC827026530DC9211DB1DD0E9C48970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:34:f8:0a:0c:ff:65:26:ce:b1:67:01:f1: 74:9a:41:95:0c:fc:a7:d9:29:61:a3:7e:40:96:1b: 05:f6:d2:f6:08:df:3a:85:cf:2a:8e:aa:31:3e:5b: aa:72:aa:6e:41:6e:ac:39:53:df:a0:aa:b6:0b:b2: bf:22:24:4f:49:ef:5f:a8:f8:2d:2e:92:53:98:a8: f7:99:24:7c:ab:56:1a:15:4c:87:55:9f:36:6b:c3: 89:c1:e6:c7:67:d2:78:47:c1:62:a4:06:e8:12:d0: 09:46:6d:6d:c1:ab:b7:87:cf:9c:47:31:c7:3a:f6: 48:ca:a6:56:9f:c0:6a:11:e1:56:2b:e5:d7:39:6d: be:b2:1a:c7:55:73:4c:c6:5f:4e:67:17:b6:04:32: ec:6d:55:09:57:18:bc:31:9b:37:e2:ca:7d:6a:39: 92:1d:ea:33:fa:7d:9f:83:bd:50:f6:1e:0b:8e:8e: bf:83:4c:e8:2b:d6:19:5d:d3:74:b2:c6:e4:bf:2f: 02:53:7a:9b:00:70:89:2e:9f:ab:de:21:ef:0d:58: 5d:d4:5f:f5:3d:02:88:73:9a:00:1f:29:f7:24:ad: 9e:e0:aa:6c:4d:1d:76:99:b6:3c:22:dc:fe:a6:41: e4:98:96:fd:ac:43:18:08:27:0d:ff:8a:3c:cd:40: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:63:E9:BA:C8:27:02:65:30:DC:92:11:DB:1D:D0:E9:C4:89:70 X509v3 Authority Key Identifier: keyid:DC:FA:CD:04:E9:47:8A:36:F0:58:CD:17:DE:0E:A6:B7:FB:6E:4D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/DCFACD04E9478A36F058CD17DE0EA6B7FB6E4D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:74:2f:85:08:72:32:cb:71:26:52:8b:2c:af:fd:3f:fb:a4: 37:c5:e9:ec:94:65:d6:ca:f9:00:dc:37:75:13:c2:84:ed:16: f2:e6:52:24:47:b8:7c:cc:db:1d:96:3f:75:09:18:35:37:31: 20:cd:a1:0d:e0:3c:38:70:c0:ee:1b:d4:f5:c9:19:d6:7e:22: b2:a4:34:98:3b:d2:18:77:4e:2a:ab:df:51:cb:8a:51:0b:52: 6a:b6:29:97:6f:9f:55:cc:b2:f5:aa:41:82:a2:a7:47:93:0b: 63:69:22:53:6d:da:86:78:22:eb:f1:bc:55:84:21:bb:95:ef: 23:aa:af:f4:29:e5:27:13:d8:f6:85:2d:ff:86:58:7d:55:9d: 86:0f:b3:38:9a:8e:5f:94:c1:bf:4e:64:63:a1:f9:5c:90:f0: c0:da:7c:3f:fc:80:b7:3c:76:e6:35:db:b2:b5:ee:2d:a1:1e: 06:a9:4e:5a:c9:ae:d8:9c:31:14:10:d2:4a:dd:8b:ba:bc:81: bb:47:51:59:7f:83:07:f2:07:ce:4a:37:bf:01:bf:80:51:de: 3b:39:01:81:49:c3:30:43:f7:ca:cd:45:94:06:28:3f:f7:07: 78:b8:20:dc:66:c3:30:0a:d0:d1:9a:6d:bb:f5:b2:b0:b7:4d: 85:24:77:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca2SE22KzvMCrkViCgyyyhbGC60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2QjdG QjZFNEQwOTAeFw0yNjA5MDMwODMzMDFaFw0yNjA5MDQxMTEyMDFaMDMxMTAvBgNV BAMTKDcxQjQ2M0U5QkFDODI3MDI2NTMwREM5MjExREIxREQwRTlDNDg5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKzT4Cgz/ZSbOsWcB8XSaQZUM /KfZKWGjfkCWGwX20vYI3zqFzyqOqjE+W6pyqm5Bbqw5U9+gqrYLsr8iJE9J71+o +C0uklOYqPeZJHyrVhoVTIdVnzZrw4nB5sdn0nhHwWKkBugS0AlGbW3Bq7eHz5xH Mcc69kjKplafwGoR4VYr5dc5bb6yGsdVc0zGX05nF7YEMuxtVQlXGLwxmzfiyn1q OZId6jP6fZ+DvVD2HguOjr+DTOgr1hld03SyxuS/LwJTepsAcIkun6veIe8NWF3U X/U9AohzmgAfKfckrZ7gqmxNHXaZtjwi3P6mQeSYlv2sQxgIJw3/ijzNQJTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcbRj6brIJwJlMNySEdsd0OnEiXAwHwYDVR0j BBgwFoAU3PrNBOlHijbwWM0X3g6mt/tuTQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGEwOTlhZGYtN2UxMi00ZTgzLTk1YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRF OTQ3OEEzNkYwNThDRDE3REUwRUE2QjdGQjZFNEQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0ZBQ0QwNEU5NDc4QTM2RjA1OENEMTdERTBFQTZCN0ZCNkU0 RDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGEwOTlhZGYtN2UxMi00ZTgzLTk1 YzItZGQ3Zjc3NDk0Nzg4LzAvRENGQUNEMDRFOTQ3OEEzNkYwNThDRDE3REUwRUE2 QjdGQjZFNEQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ0L4UIcjLLcSZSiyyv/T/7pDfF6eyUZdbK +QDcN3UTwoTtFvLmUiRHuHzM2x2WP3UJGDU3MSDNoQ3gPDhwwO4b1PXJGdZ+IrKk NJg70hh3Tiqr31HLilELUmq2KZdvn1XMsvWqQYKip0eTC2NpIlNt2oZ4IuvxvFWE IbuV7yOqr/Qp5ScT2PaFLf+GWH1VnYYPsziajl+Uwb9OZGOh+VyQ8MDafD/8gLc8 duY127K17i2hHgapTlrJrticMRQQ0krdi7q8gbtHUVl/gwfyB85KN78Bv4BR3js5 AYFJwzBD98rNRZQGKD/3B3i4INxmwzAK0NGabbv1srC3TYUkd+0= -----END CERTIFICATE-----Generated at Thu Sep 3 20:51:05 2026 by rpki-client